This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gO_3sWsWGZ7ydg5-2Dz6qZ1d26M.roa File: gO_3sWsWGZ7ydg5-2Dz6qZ1d26M.roa (raw, json) Hash identifier: 45MEap1x6qHPWeApooEoDm0JYzok3M6nm4mhWbb9108= Subject key identifier: 80:EF:F7:B1:6B:16:19:9E:F2:76:0E:7E:D8:3C:FA:A9:9D:5D:DB:A3 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A32D70E8C94022CC1730D7099497 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gO_3sWsWGZ7ydg5-2Dz6qZ1d26M.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209630 IP address blocks: 31.56.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a3:2d:70:e8:c9:40:22:cc:17:30:d7:09:94:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80eff7b16b16199ef2760e7ed83cfaa99d5ddba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:b9:76:34:45:01:91:4c:c2:f8:f9:2e:c8: 7e:df:c1:b1:d4:a0:5f:c8:47:74:08:76:fb:77:e4: 74:02:c8:24:73:3e:72:7a:ba:eb:b1:d6:9d:eb:30: 94:90:d9:b4:eb:bc:c1:ce:d8:0d:c3:e4:dc:02:16: d5:d5:ae:d6:1c:65:b2:92:48:e0:42:ad:0f:30:23: cb:f5:7d:ff:75:9c:7f:1d:1d:22:49:37:d4:7f:b0: 2c:f3:e0:10:4a:60:df:63:db:19:c2:3a:46:f3:18: cb:99:ca:18:d9:91:f6:5f:fc:23:28:ee:87:f5:6b: 4e:f2:4c:0c:28:f8:79:90:3f:c4:67:13:38:1d:c8: 3b:0a:5a:b3:65:74:0e:5d:3c:14:58:10:a4:c6:2d: e0:1c:4f:0f:d2:a2:5e:b0:d7:53:58:1c:2f:b5:03: ec:68:1d:c6:19:b1:f3:98:b1:1a:0d:15:a5:9f:02: 5d:15:99:77:9a:7f:75:e8:85:c7:d7:a8:cd:25:3f: 6d:6b:cc:53:bb:89:a6:c0:87:51:54:9e:ee:43:42: 21:b9:15:89:1b:a6:f9:64:e8:2e:aa:f1:1a:96:91: aa:a7:e1:71:9c:bb:5b:ac:5e:3a:88:31:16:59:d8: 83:10:ab:bb:88:29:fb:72:9e:88:6e:75:45:f3:f6: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EF:F7:B1:6B:16:19:9E:F2:76:0E:7E:D8:3C:FA:A9:9D:5D:DB:A3 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gO_3sWsWGZ7ydg5-2Dz6qZ1d26M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.102.0/24 Signature Algorithm: sha256WithRSAEncryption 65:05:e9:45:47:a3:35:4f:de:de:1b:a2:ce:32:53:47:ce:80: 5a:ab:9d:d2:d5:0c:e5:68:86:4f:03:89:c7:66:0d:75:56:6a: 65:20:4e:ea:a7:7f:c8:2d:e5:10:ca:f9:e5:f5:da:ac:7f:7b: 15:f7:59:1a:e4:5f:30:63:c5:c8:08:0f:b3:a0:22:a0:ec:dd: fe:e6:8d:d6:8c:85:82:9d:be:1c:de:7f:6c:c2:23:32:b7:b2: a6:a1:42:5c:9a:de:ac:35:c9:df:64:78:64:be:ad:72:de:70: b4:82:5d:ee:bb:56:90:09:8b:ad:69:a2:20:91:1c:8c:09:e4: 8f:98:b2:95:e2:55:25:de:59:d1:99:de:69:03:c9:3e:cf:dc: e7:7a:08:b2:75:82:52:d0:75:5c:d1:ab:dc:be:e1:0f:96:1b: 71:e0:e8:34:3d:3b:e8:27:57:ad:1c:81:20:9a:fe:6b:fe:bb: ac:6b:4c:58:65:b5:40:f8:eb:f4:c9:f6:a0:6e:e0:21:7a:2b: a5:2b:8d:55:e9:98:73:81:4e:3d:67:55:ae:3f:58:a3:59:54: d1:51:99:0c:c5:4a:42:aa:8c:3d:62:8e:86:a4:55:19:a5:f8: 52:19:a6:73:cb:20:10:b6:9e:bd:5d:6a:58:2b:1a:17:06:27: a9:f9:97:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKMtcOjJQCLMFzDXCZSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGVmZjdiMTZiMTYxOTllZjI3NjBlN2VkODNjZmFhOTlkNWRkYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfq5djRFAZFMwvj5Lsh+38Gx1KBf yEd0CHb7d+R0Asgkcz5yerrrsdad6zCUkNm067zBztgNw+TcAhbV1a7WHGWykkjg Qq0PMCPL9X3/dZx/HR0iSTfUf7As8+AQSmDfY9sZwjpG8xjLmcoY2ZH2X/wjKO6H 9WtO8kwMKPh5kD/EZxM4Hcg7ClqzZXQOXTwUWBCkxi3gHE8P0qJesNdTWBwvtQPs aB3GGbHzmLEaDRWlnwJdFZl3mn916IXH16jNJT9ta8xTu4mmwIdRVJ7uQ0IhuRWJ G6b5ZOguqvEalpGqp+FxnLtbrF46iDEWWdiDEKu7iCn7cp6IbnVF8/bG8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDv97FrFhme8nYOftg8+qmdXdujMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZ09fM3NXc1dHWjd5ZGc1LTJEejZxWjFkMjZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhmMA0G CSqGSIb3DQEBCwUAA4IBAQBlBelFR6M1T97eG6LOMlNHzoBaq53S1QzlaIZPA4nH Zg11VmplIE7qp3/ILeUQyvnl9dqsf3sV91ka5F8wY8XICA+zoCKg7N3+5o3WjIWC nb4c3n9swiMyt7KmoUJcmt6sNcnfZHhkvq1y3nC0gl3uu1aQCYutaaIgkRyMCeSP mLKV4lUl3lnRmd5pA8k+z9znegiydYJS0HVc0avcvuEPlhtx4Og0PTvoJ1etHIEg mv5r/rusa0xYZbVA+Ov0yfagbuAheiulK41V6ZhzgU49Z1WuP1ijWVTRUZkMxUpC qow9Yo6GpFUZpfhSGaZzyyAQtp69XWpYKxoXBiep+ZdS -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:03 2026 by rpki-client